MAL-2025-188680 Malicious code in phoebe-yildun-gravity-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e7f8707aee62cb3960c90f21928bae1147bd91c27fe32db5fe802a976e89bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-puha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df32c5d22441a99724fd3640edc5df564f27abc4a9073d2efa477535448b12ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756402639ddaa5f0eb2fe282c6ca865575926ed9b2d8ebae64c9e48778b78f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154717 Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangga26-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601fe4eafa9df6f8b2acfacd518ead05877192f5a07511f55cfb999f7230ac1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96051 Malicious code in profound_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d7a98400216f24a452498242c5512171317ced23d37a88f188d8bfee82a766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77814 Malicious code in eko-donat20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ad40a4afd8155b19a6da9ec6e538b343e127d3b6ccd4e84be4af7fa334ebbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-saguer14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0493ef04b19a9e03e3279a5861a86d9305d122a377d631c196bf4d144c3d8c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69233 Malicious code in ltd-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary-black-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46ab5155ff98ddff47684788ea60599d59a7d6ceb38940452371b8ffbdbbe4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...